{"action":"closed","issue":{"url":"https://api.github.com/repos/dunglas/DunglasAngularCsrfBundle/issues/39","repository_url":"https://api.github.com/repos/dunglas/DunglasAngularCsrfBundle","labels_url":"https://api.github.com/repos/dunglas/DunglasAngularCsrfBundle/issues/39/labels{/name}","comments_url":"https://api.github.com/repos/dunglas/DunglasAngularCsrfBundle/issues/39/comments","events_url":"https://api.github.com/repos/dunglas/DunglasAngularCsrfBundle/issues/39/events","html_url":"https://github.com/dunglas/DunglasAngularCsrfBundle/issues/39","id":198814744,"number":39,"title":"Form CSRF Token Disiabling No Longer Works in Symfony 3.2","user":{"login":"chrisguitarguy","id":1010392,"avatar_url":"https://avatars2.githubusercontent.com/u/1010392?v=3","gravatar_id":"","url":"https://api.github.com/users/chrisguitarguy","html_url":"https://github.com/chrisguitarguy","followers_url":"https://api.github.com/users/chrisguitarguy/followers","following_url":"https://api.github.com/users/chrisguitarguy/following{/other_user}","gists_url":"https://api.github.com/users/chrisguitarguy/gists{/gist_id}","starred_url":"https://api.github.com/users/chrisguitarguy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chrisguitarguy/subscriptions","organizations_url":"https://api.github.com/users/chrisguitarguy/orgs","repos_url":"https://api.github.com/users/chrisguitarguy/repos","events_url":"https://api.github.com/users/chrisguitarguy/events{/privacy}","received_events_url":"https://api.github.com/users/chrisguitarguy/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-01-04T21:25:35Z","updated_at":"2017-03-22T16:21:04Z","closed_at":"2017-03-22T16:21:04Z","body":"Looks like its due to a change in the order type extensions are loaded. See https://github.com/symfony/symfony/pull/19790.\r\n\r\nThe form type extension in this bundle loads before the core csrf extension. So a valid csrf token from this bundle disable csrf protection on a form, only to have it enabled again by the core csrf extension.\r\n\r\nI'm not sure if this is a BC break in symfony itself, or something that's a bug (ish, Symfony changing underneath you is not really a bug) in this bundle."}}
{"actor":{"display_login":"chrisguitarguy"}}